5) Custom login module is called and need to extract username from SAML token

6) If the login is known the User is authenticated and access granted to internal system, otherwise access is
denied.

I am wondering if anybody can help with providing information how the
SAML token can be obtain in custom login module (point 5 above) using WAS API, and next
how it can be consumed to retrieve issuing username? Is there any WAS specific API available to obtain the SAML token?

I have inspected the code samples in section "Sample code of generating
SAMLToken from SAML XMLStructure or InputStream " provide on the
following page: